cotton

What Cotton is

Cotton is a planning tool. It projects your account balances ahead from what you tell it and from your bank and card statements. It cannot move money, and it never sees your bank password.

What we collect

• Your email address, to sign you in with a one-time code.
• The accounts you add: a name, the kind of account, the last four digits of its number if you share them, balances, interest rates and credit limits.
• The recurring items, plans and balance updates you enter.
• From statements you upload: each transaction’s date, wording (with long numbers removed), payee, amount and category. The statement file itself is not kept.
• From a bank you connect through Plaid: the accounts the bank shares, their balances and their transactions, and permission to ask the bank for updates. You sign in on Plaid’s page or your bank’s own site; Cotton never receives your bank password.

We never store bank sign-in details, full account or routing numbers, or Social Security numbers.

Why we use it

To build your forecast, find what repeats, sort your spending, and show you where you stand. Nothing else. Cotton does not sell your data, and it does not use it for advertising.

Who else sees it

We use service providers to host Cotton, store information, and deliver sign-in emails. If you connect a bank, Plaid processes your connection and supplies authorized account data; Plaid’s own privacy terms are at plaid.com/legal. If you enable AI statement reading or category suggestions, Anthropic processes the information needed for those features.

Your choices

• You decide what to add. Statements and bank connections are both optional.
• Disconnecting stops Cotton from syncing this bank and requests removal of the connection from Plaid. Previously imported records remain unless you delete them.
• You can delete a workspace or your account in Cotton. Deleted information is removed from the active service. Copies in backups expire on our backup schedule; if we restore a backup, we reapply deletion requests before returning it to service.

How long we keep it

For as long as you use Cotton. An account with no sign-in for 24 months is sent a notice and deleted 30 days later.

How we protect it

Your data is encrypted in transit and at rest, and only you and the people you share a workspace with can reach it.

If something goes wrong

If we ever learn that your data was exposed, we will tell you plainly and promptly: what happened, what was involved, and what to do.

Changes and contact

Cotton may update this policy; the date at the top shows the current version. Questions go to cottoncashflow@gmail.com.

If Cotton ever changes hands, your data would stay under this policy with the new owner.